In short: WatchGuard's cloud-managed Wi-Fi 6 and Wi-Fi 7 access points need a licence per access point. Standard Wi-Fi covers cloud management, configuration, CLI access, support, warranty and 24 hours of reporting. USP Wi-Fi adds 30-day reporting, syslog, VPN to a Firebox, airspace monitoring, ThreatSync integration and guest analytics.
What WatchGuard Wi-Fi is
WatchGuard's current access points are Wi-Fi 6 and Wi-Fi 7 units for indoor, outdoor and rugged locations, managed from WatchGuard Cloud, the same console that runs Firebox firewalls, Endpoint Security and AuthPoint. You define networks (SSIDs), radio settings and guest access once, and they apply to every access point at every site, with WPA3 encryption supported.
These access points are managed through WatchGuard Cloud. WatchGuard's older Wi-Fi 5 access points were managed by a Firebox's Gateway Wireless Controller or the earlier Wi-Fi Cloud service and use different licences.
Standard Wi-Fi and USP Wi-Fi compared
Every cloud-managed access point needs one of two licences.
| Feature | Standard Wi-Fi | USP Wi-Fi |
|---|---|---|
| Inventory management in WatchGuard Cloud | Yes | Yes |
| SSID, device, radio and captive portal configuration | Yes | Yes |
| CLI/SSH access for troubleshooting | Yes | Yes |
| 24/7 support and hardware warranty | Yes | Yes |
| Reporting history | 24 hours | 30 days |
| Syslog server support | No | Yes |
| Access point VPN to a Firebox | No | Yes |
| Airspace monitoring with alerts | No | Yes |
| ThreatSync integration | No | Yes |
| Guest analytics, Client Journey and neighbouring Wi-Fi reports | No | Yes |
USP stands for WatchGuard's Unified Security Platform. WatchGuard says it decides which future features are added to USP Wi-Fi, and some may need other WatchGuard products.
How Wi-Fi licensing works
The licence is per access point and is activated with the access point's serial number and a licence key. You can move an access point from Standard to USP Wi-Fi when you need the extra reporting or VPN features, and we confirm in your quote how the hardware itself is supplied.
If a licence expires, the access point keeps passing traffic with its last configuration, but you can change little beyond SSID passphrases, you get no new firmware, reporting or technical support, and captive portal and access point VPN stop working. We track renewal dates so that does not happen by accident. Ask us for a quote for the number of access points you need.
Deployment and requirements
Each access point needs an internet connection to reach WatchGuard Cloud and power, usually Power over Ethernet from a switch. Once claimed into your account it downloads its configuration automatically, so access points can be shipped straight to a site. A site survey helps decide how many access points you need and where they go, particularly in older buildings or warehouses.
With a USP Wi-Fi licence, an access point can build a VPN back to a Firebox, so a small branch or home office can join the corporate network without its own firewall.
Who it suits
WatchGuard Wi-Fi suits organisations that already use Fireboxes or plan to, and want wireless managed in the same console as their firewall. Standard Wi-Fi is enough for straightforward staff and guest networks; USP Wi-Fi suits schools, retail and multi-site organisations that want longer reporting, guest insights, rogue access point monitoring or remote-site VPN.
How we help
We plan coverage, supply and claim access points into WatchGuard Cloud, build staff and guest networks with appropriate security and renew licences before they lapse. For other wireless options, see Forever Group's networking pages linked below.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is the difference between Standard Wi-Fi and USP Wi-Fi?
Both include cloud management, configuration, CLI access, support and warranty. USP Wi-Fi adds 30 days of reporting instead of 24 hours, syslog, VPN to a Firebox, airspace monitoring, ThreatSync integration and guest analytics.
Can I manage WatchGuard's Wi-Fi 6 access points from my Firebox?
No. The Wi-Fi 6 and Wi-Fi 7 access points are managed in WatchGuard Cloud. The Firebox Gateway Wireless Controller manages WatchGuard's older Wi-Fi 5 access points.
What happens when an access point licence expires?
The access point keeps working with its last configuration, but you cannot change most settings, install new firmware or get support, and captive portal and access point VPN stop working.
Is WatchGuard Wi-Fi licensed per user?
No. Wi-Fi licences are per access point, however many people connect to it.